HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
The Kinkaid School
bd_f78c12843b2d63b0 · schema v1 · pii pii-v1
Full breach record for The Kinkaid School →The Kinkaid School, an educational institution in Houston, Texas, experienced an external system breach (hacking) between February 7, 2020, and May 20, 2020. The incident was discovered on October 5, 2020. The breach compromised names and financial account numbers (including credit/debit card numbers with security codes/PINs). A total of 3,581 individuals were affected, including 5 Maine residents. The school provided written notification on January 15, 2021, and offered two years of credit monitoring and identity theft protection services through CyberScout.
Maine clockDiscovered Oct 5, 2020 → Filed with AG Jan 15, 2021102d ✗ ME AG >90d15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3,581 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2d25e1ea-4f24-4d8e-8150-e7cf63aea1b0.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 15, 2021
- Raw hash
- efe1d1546ac9e7b81c24214143de1d7b634295c9e8ef1952e1d4f6c7650abccd
Reporting entity
- Name
- The Kinkaid Schoolnorm: the kinkaid school
- Industry
- Education
Victim entity
- Name
- The Kinkaid Schoolnorm: the kinkaid school
- Industry
- Education
Incident
- Discovered
- Oct 5, 2020
- Materiality determined
- —
- Notification sent
- Jan 15, 2021
- Affected individuals
- 3,581
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 15 weeks(102 days from discovery to filing)
- Compliance flags
- ME AG >90d · 102dME resident >60d · 102d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 5, 2020→ Filed with AG: Jan 15, 2021102d 90 days ME AG >90d Maine Discovered: Oct 5, 2020→ Notified: Jan 15, 2021102d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.